Behavioral task
behavioral1
Sample
e260ffaaa5bed6d00ddf85dcafeb3ca1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
e260ffaaa5bed6d00ddf85dcafeb3ca1_JaffaCakes118
-
Size
968KB
-
MD5
e260ffaaa5bed6d00ddf85dcafeb3ca1
-
SHA1
5a137f903731633842c7547a4be10ddfdb9d477c
-
SHA256
7a62c4460076a336b4f0354da61fc18cb578ea4859f6026c4b2ebb585fdad7d9
-
SHA512
2c0eec82aca20630431f1837694957b894c1d2d2c7814d34f1187c737327de9f0705006cacf2f27b791e225d65842b13348cf9534f9c3fb7597e40561d0e778d
-
SSDEEP
12288:c1bi1SfCGuGlnEcB+H+lOIAHY/gEI9kBdCmdhkbiW0UObx:L4CGuGFEcGbLYvXCmgGWw
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e260ffaaa5bed6d00ddf85dcafeb3ca1_JaffaCakes118
Files
-
e260ffaaa5bed6d00ddf85dcafeb3ca1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 92KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 428KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE